WAF - WAF Release - 2025-09-29
UpdateUnverifiedAdded Sep 24, 2026
This week highlights four important vendor- and component-specific issues: an authentication bypass in SimpleHelp (CVE-2024-57727), an information-disclosure flaw in Flowise Cloud (CVE-2025-58434), an SSRF in the WordPress plugin Ditty (CVE-2025-8085), and a directory-traversal bug in Vite (CVE-2025-30208).
Topics: Security, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Sep 29 | Radar - Regional Data in Cloudflare Radarunverified Update | Update |
| Sep 30 | Cloudflare One Client - WARP client for Windows (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Cloudflare One Client - WARP client for macOS (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Cloudflare One Client - WARP client for Linux (version 2025.7.176.0)unverified GA | GA |
| Sep 30 | Gateway - Application granular controls for operations in SaaS applicationsunverified Update | Update |
| Sep 28 | WAF - WAF Release - 2025-09-28 - Emergencyunverified Update | Update |
| Oct 1 | Analytics - New Confidence Intervals in GraphQL Analytics APIunverified Update | Update |
| Oct 1 | Containers - Larger Container instance typesunverified Update | Update |
Also shipped on Sep 29, 2025
Cloudflare in September 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Sep 29 | 1.141.5 (2025-09-24)unverified | Pub/Sub | Update | |
| Sep 29 | 2.1.0 (2025-09-25)unverified | Pub/Sub | Update | |
| Sep 29 | Container Images (release 250929)unverified | Deepgram | Update | |
| Sep 29 | This Release Contains The Following Changesunverified | Deepgram | Update | |
| Sep 29 | Workspace-level AI features toggleunverified | Figma | Update | |
| Sep 29 | Tailscale container image v1.88.3unverified | Tailscale | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.